Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
File: KPev7E0_BvgNaHKm1iRs0B5z1qY.mft (raw, json)
Hash identifier: HHCJkz19C1ByAJvnx7//wCDX4b34b/UtKQTgF4Pe78c=
Subject key identifier: C1:33:CF:FC:FC:DA:B3:BC:D7:9B:37:F3:02:52:44:B2:FD:12:26:B5
Authority key identifier: 28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6
Certificate issuer: /CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6
Certificate serial: 0194BBCDB1FC38201AF6340671C2EAFFBD56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: KPev7E0_BvgNaHKm1iRs0B5z1qY.crl (hash: LaTbz+Rd+aijrO9JH6y5N+svIR9UX4Nv0Q3GRfQ0C80=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b1:fc:38:20:1a:f6:34:06:71:c2:ea:ff:bd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=c133cffcfcdab3bcd79b37f3025244b2fd1226b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:b0:f7:29:e4:73:e1:6a:d5:91:9c:2f:77:
21:d2:59:47:e7:dd:96:c8:50:89:1b:0b:a1:43:0e:
55:27:d9:3f:f9:8f:13:d4:ca:50:b9:b5:25:8d:e9:
cc:e4:7a:77:c3:2d:a0:9b:b5:a7:14:ab:1f:da:c3:
d2:b6:a1:32:dc:0d:36:cf:5f:61:ef:b9:a7:10:ba:
95:db:7b:25:00:32:75:dd:ec:46:f1:47:06:4a:db:
71:62:b5:f2:62:ae:67:a9:90:3e:16:ba:2c:80:8c:
3e:25:88:9a:16:48:a0:34:2e:06:d7:75:18:45:0e:
fd:60:d5:89:d4:45:3c:8a:79:23:bc:3a:da:dc:c6:
79:15:36:15:35:7f:5d:98:43:a0:0d:75:b2:d3:11:
96:86:d5:9c:90:ab:3c:1d:80:71:ea:13:4a:cf:9e:
3b:66:77:17:61:29:e2:30:d4:f4:00:b6:14:24:37:
ae:5e:45:79:02:f3:3b:e2:95:38:2d:4f:ea:6e:b8:
66:db:85:6f:e7:bd:84:c7:05:96:69:82:08:8a:77:
cc:51:9a:00:af:75:66:10:cb:40:54:c4:e3:cc:a6:
a6:1a:c7:a3:d8:d6:1d:04:5b:4c:32:58:28:0b:1c:
87:79:3f:89:15:bf:61:34:d4:46:d2:0d:b2:71:80:
d8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:33:CF:FC:FC:DA:B3:BC:D7:9B:37:F3:02:52:44:B2:FD:12:26:B5
X509v3 Authority Key Identifier:
keyid:28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:32:3e:37:c9:b2:71:4f:88:c2:0a:7e:d5:a7:6c:e3:25:8f:
02:77:87:3b:e8:d9:22:e3:24:c1:61:02:1e:3f:54:6f:09:ff:
e4:31:8e:1f:72:3c:e0:56:40:6c:1d:1e:82:ba:c9:eb:dd:11:
f5:04:83:29:d9:35:07:78:93:5c:aa:e4:36:bb:4c:fd:91:5c:
bd:08:2b:a4:9d:89:81:b1:cf:64:e3:5c:b4:8c:c8:ea:56:32:
3d:6e:25:6b:1a:fd:be:58:25:a4:ff:63:6e:fd:f8:3d:22:56:
4f:e0:72:4a:8b:df:6d:c8:68:f0:85:fe:ae:6b:0b:65:de:6f:
df:ed:d0:c3:b5:5c:be:ba:c3:4e:bc:63:0e:ea:ae:3f:8b:6c:
71:c7:25:4a:c8:39:e9:c7:6c:96:8f:a7:0f:a2:a1:32:22:f8:
2f:39:27:8e:45:e1:03:df:af:49:08:6b:bc:35:d6:04:01:1b:
e2:d3:52:d6:fe:88:21:d4:ca:14:69:e9:56:32:55:9d:85:79:
af:80:3d:c3:be:11:ca:52:7d:18:2f:3f:44:47:e6:a1:37:72:
80:03:0c:6b:6d:45:ae:f0:2f:a5:e6:5d:f4:e9:92:ac:41:5a:
2b:37:29:59:c8:28:e8:84:eb:72:d4:21:8c:4c:ac:38:25:26:
9d:c4:1a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:51 2025 by rpki-client